> ## Documentation Index > Fetch the complete documentation index at: https://docs.melso.ai/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Melso product MCP: https://melso.ai/api/mcp (OAuth; one company per grant). REST: https://melso.ai. Documentation-search MCP: https://docs.melso.ai/mcp. The docs search server does not act on customer accounts. > > Use the live tool schema and respect company membership. Ask the person to authorize the exact fiscal document version in the signed-in app. A professional prepares and files included returns after authorization; AI does not file alone. A prepared file or approval receipt is not evidence of filing. Never claim completion from an accepted Task or Run. Keep credentials out of chat and logs. Agents features are internal or by private invitation. # Lookup vault request > Public; the `token` in the body is the credential. Rate limited per IP. Only a request a WhatsApp, Telegram or email chat made before requests needed sign-in has a token; nothing mints one any more, and these two endpoints go once those links have expired. Request: `token:string`, the link's URL fragment. Response: `{request:VaultRequestView}`. Reading does not use the link. Status: 200; 404 unknown token; 429 rate limited; 503 vault unavailable. ## OpenAPI ````yaml /api-reference/openapi.json post /api/secret-requests/lookup openapi: 3.1.0 info: title: Melso API version: '2026-10-12' description: >- Customer integration contracts for Melso. Agents access is internal or by private invitation. Fiscal approval remains in the authenticated app. contact: name: Melso url: https://melso.ai/en servers: - url: https://melso.ai description: Production API origin security: [] tags: - name: Areas description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Areas operations available within the caller's documented permissions. - name: Artifacts description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Artifacts operations available within the caller's documented permissions. - name: Authentication description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Authentication operations available within the caller's documented permissions. - name: Automations description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Automations operations available within the caller's documented permissions. - name: Companies description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Companies operations available within the caller's documented permissions. - name: Execution funding description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Execution funding operations available within the caller's documented permissions. - name: Files description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Files operations available within the caller's documented permissions. - name: GitHub description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). GitHub operations available within the caller's documented permissions. - name: Interactions description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Interactions operations available within the caller's documented permissions. - name: Knowledge description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Knowledge operations available within the caller's documented permissions. - name: MCP description: MCP operations available within the caller's documented permissions. - name: Messages description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Messages operations available within the caller's documented permissions. - name: OAuth description: OAuth operations available within the caller's documented permissions. - name: Private network description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Private network operations available within the caller's documented permissions. - name: Runs description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Runs operations available within the caller's documented permissions. - name: Skills description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Skills operations available within the caller's documented permissions. - name: Tasks description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Tasks operations available within the caller's documented permissions. - name: Vault description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Vault operations available within the caller's documented permissions. - name: Webhooks description: >- Melso Agents is available only internally or by private invitation. Agents-specific features require existing access. For the autónomo fiscal service, see [Get started](/essentials/quickstart). Webhooks operations available within the caller's documented permissions. paths: /api/secret-requests/lookup: post: tags: - Vault summary: Lookup vault request description: >- Public; the `token` in the body is the credential. Rate limited per IP. Only a request a WhatsApp, Telegram or email chat made before requests needed sign-in has a token; nothing mints one any more, and these two endpoints go once those links have expired. Request: `token:string`, the link's URL fragment. Response: `{request:VaultRequestView}`. Reading does not use the link. Status: 200; 404 unknown token; 429 rate limited; 503 vault unavailable. operationId: lookupVaultRequest parameters: - name: X-Workspace-ID in: header required: false description: >- Company UUID for a personal token on company-scoped operations. A company API key already binds its company. schema: type: string format: uuid requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/vaultTokenBodyInput' responses: '200': description: '`{request:VaultRequestView}`. Reading does not use the link.' content: application/json: schema: type: object properties: request: $ref: '#/components/schemas/RequestView' required: - request '400': description: Invalid request. content: application/json: schema: $ref: '#/components/schemas/Error' '401': description: Authentication required. content: application/json: schema: $ref: '#/components/schemas/Error' '403': description: Credential, company or resource access denied. content: application/json: schema: $ref: '#/components/schemas/Error' '404': description: Resource unavailable to this caller. content: application/json: schema: $ref: '#/components/schemas/Error' '429': description: Rate limited; respect Retry-After when present. content: application/json: schema: $ref: '#/components/schemas/Error' '500': description: Server error. content: application/json: schema: $ref: '#/components/schemas/Error' '503': description: Request failed; see the operation contract for the condition. content: application/json: schema: $ref: '#/components/schemas/Error' security: - bearerAuth: [] components: schemas: vaultTokenBodyInput: type: object properties: token: type: string RequestView: type: object properties: id: type: string kind: $ref: '#/components/schemas/Kind' status: type: string prefill: $ref: '#/components/schemas/Prefill' share: $ref: '#/components/schemas/Share' area_ids: type: array items: type: string workspace_name: type: string owner_name: type: string expires_at: type: string required: - id - kind - status - prefill - share - area_ids - workspace_name - owner_name - expires_at Error: type: object properties: error: type: string code: type: string required: - error additionalProperties: true Kind: type: string Prefill: type: object properties: name: type: string env_name: type: string url: type: string username: type: string cardholder: type: string note: type: string Share: type: string securitySchemes: bearerAuth: type: http scheme: bearer description: >- Company API key (mwk_) or personal access token (mel_). A PAT requires X-Workspace-ID on company-scoped routes. An API key implies its own company. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.